一种基于ITU-T身份管理的双向认证系统  

A Demand-oriented Mutual Authentication System Based on ITU-T Identity Management

作　　者：孔繁强[1] 刘建华[1] 范九伦[1] 

机构地区：[1]西安邮电学院信息安全研究中心,陕西西安710061

出　　处：《信息安全与通信保密》2010年第2期73-75,共3页Information Security and Communications Privacy

摘　　要：联邦身份管理是一个在大规模异构网络环境中对身份进行统一管理的安全技术。在分析ITU-T联邦身份管理双向认证模型的基础上,根据实体安全需求设计认证系统,并针对模型的特点设计出一种面向实体安全需求的双向认证系统,最后简要分析了系统的安全性。该系统不仅能够有效保护实体身份信息的安全性,而且兼顾了实体需求和认证效率,可用于不同安全等级的应用场合,有较高的实用价值。Federated Identity Management is a centralization of management security technology for identity in large-scale heterogeneous network environments. Based on analysis of mutual authentication mode in ITU-T federal identity management, an authentication system is proposed according to the security requirement of entity and a demand-oriented mutual authentica- tion system is designed by making use of the features of mode. The designed system could effectively protect the identity information of entity but also give consideration to the demand of entity and the efficiency of authentication system. This system could be used to application cases with different security-level environment, and is of fairly high practical value.

关 键 词：ITU—T 身份管理 双向认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]